Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/e8a764ddd93f4101899418ef4d2fde81/0/36342e38342e38382e302f32312d3231203d3e2035363530.roa
File:                     36342e38342e38382e302f32312d3231203d3e2035363530.roa (raw, json)
Hash identifier:          vXXRgHxrQULeuyx1f5ZVKfWlY7E7jUu9QG145wbLCxk=
Subject key identifier:   27:9D:BF:7E:6E:DA:15:0D:80:BA:64:34:40:83:44:AD:F5:1E:4C:2B
Certificate issuer:       /CN=89192ba6a6447ae8e0dfc18c30de8fb6818ba647d42765672c
Certificate serial:       024080FE12CE509414E9B5C8EA5BF326A6AFF578
Authority key identifier: A5:8D:EC:BE:AC:6A:D9:6C:03:FA:34:63:A2:48:3D:72:FA:D1:A0:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d96d9f0-6f14-41fe-bf49-eed930201a23/89192ba6a6447ae8e0dfc18c30de8fb6818ba647d42765672c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/e8a764ddd93f4101899418ef4d2fde81/0/36342e38342e38382e302f32312d3231203d3e2035363530.roa
Signing time:             Mon 16 Jun 2025 13:01:24 +0000
ROA not before:           Mon 16 Jun 2025 12:56:24 +0000
ROA not after:            Mon 15 Jun 2026 13:01:24 +0000
asID:                     5650
IP address blocks:        64.84.88.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/e8a764ddd93f4101899418ef4d2fde81/0/A58DECBEAC6AD96C03FA3463A2483D72FAD1A0BB.crl
                          rsync://rpki-rps.arin.net/repository/e8a764ddd93f4101899418ef4d2fde81/0/A58DECBEAC6AD96C03FA3463A2483D72FAD1A0BB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d96d9f0-6f14-41fe-bf49-eed930201a23/89192ba6a6447ae8e0dfc18c30de8fb6818ba647d42765672c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d96d9f0-6f14-41fe-bf49-eed930201a23/4d96d9f0-6f14-41fe-bf49-eed930201a23.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d96d9f0-6f14-41fe-bf49-eed930201a23/4d96d9f0-6f14-41fe-bf49-eed930201a23.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d96d9f0-6f14-41fe-bf49-eed930201a23.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 03:48:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:40:80:fe:12:ce:50:94:14:e9:b5:c8:ea:5b:f3:26:a6:af:f5:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89192ba6a6447ae8e0dfc18c30de8fb6818ba647d42765672c
        Validity
            Not Before: Jun 16 12:56:24 2025 GMT
            Not After : Jun 15 13:01:24 2026 GMT
        Subject: CN=279DBF7E6EDA150D80BA6434408344ADF51E4C2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2e:9d:e2:83:ed:61:d1:6f:78:c8:82:3f:0e:
                    3a:19:8d:c7:a1:ab:fe:f4:b1:37:e3:42:1d:a9:64:
                    21:8b:fe:a3:84:e2:ed:76:1a:ca:41:4a:0e:e8:b9:
                    4f:51:87:c8:73:39:93:68:cf:07:21:60:df:4c:bb:
                    3a:a5:15:79:fb:36:a0:56:cd:c9:f3:71:ef:e3:48:
                    94:9b:4f:57:80:4e:12:d8:fc:bf:e0:bc:c6:29:eb:
                    3d:c6:6f:72:49:5b:4d:6a:58:6b:c2:d3:f2:fe:d6:
                    37:02:e0:c4:59:8a:5e:6f:e8:94:03:a6:00:09:27:
                    83:15:cf:b5:a0:7a:b4:d2:62:95:2d:64:57:fb:1f:
                    33:75:e7:8b:09:e6:94:7c:f8:48:4a:ea:8d:04:9f:
                    70:7f:82:f7:de:77:31:3d:c1:ce:61:05:fa:b0:95:
                    86:2e:78:f5:2d:5c:52:00:eb:03:0f:dc:58:2b:05:
                    ff:7f:4e:ef:f3:d3:9b:b1:f4:82:ce:ac:e4:90:8d:
                    21:1f:8f:a6:8e:66:bb:fa:22:18:2c:2a:91:99:b7:
                    f5:45:a6:a5:51:ae:7f:52:57:66:d1:1a:70:9e:af:
                    f7:52:0e:9e:06:fb:4f:fe:2c:f5:1a:39:6d:50:ab:
                    b3:fa:ae:f5:db:91:d6:5a:67:b9:8d:26:55:f9:22:
                    f1:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:9D:BF:7E:6E:DA:15:0D:80:BA:64:34:40:83:44:AD:F5:1E:4C:2B
            X509v3 Authority Key Identifier:
                keyid:A5:8D:EC:BE:AC:6A:D9:6C:03:FA:34:63:A2:48:3D:72:FA:D1:A0:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/e8a764ddd93f4101899418ef4d2fde81/0/A58DECBEAC6AD96C03FA3463A2483D72FAD1A0BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d96d9f0-6f14-41fe-bf49-eed930201a23/89192ba6a6447ae8e0dfc18c30de8fb6818ba647d42765672c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/e8a764ddd93f4101899418ef4d2fde81/0/36342e38342e38382e302f32312d3231203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.84.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8b:a2:b7:35:e8:cf:8d:72:43:33:db:57:16:00:fb:8e:4c:62:
         40:ec:64:fd:3a:9b:69:3b:ff:ec:0f:b9:0f:17:79:1a:58:6e:
         33:6f:ce:2e:d3:f5:d4:32:c9:c2:50:ac:1c:26:53:13:93:17:
         63:e8:6e:5c:b9:7b:53:2e:94:93:db:6b:8b:41:f8:6b:f4:d0:
         a1:b1:9e:dc:b6:1f:f7:e8:98:86:50:61:19:09:96:40:d3:90:
         73:99:e5:ab:6b:c7:7f:01:cc:6a:eb:40:5a:15:bf:06:9d:5d:
         f1:0c:cb:b0:31:ab:0a:90:bf:ac:08:5b:a5:39:5c:e4:71:bb:
         8c:43:9e:15:55:51:c5:cd:62:21:e0:c9:81:32:fc:bc:1a:0e:
         9e:0b:2a:2b:2d:84:b5:d0:12:38:f3:5a:8f:64:10:30:4f:f1:
         3d:0a:8c:26:5f:ba:55:76:e5:8c:01:60:89:03:df:e0:7e:ce:
         0f:e3:32:f0:7f:34:f1:eb:a0:ee:92:14:1f:b1:42:79:f0:ea:
         e8:1c:5a:ff:f4:90:59:87:1e:99:c3:5a:65:e0:f0:5f:72:54:
         9b:0f:9d:c5:2c:03:55:28:bd:16:c6:41:b1:bd:b5:94:06:6d:
         b1:3d:dc:c8:a8:0f:2d:13:03:5e:53:6f:ea:31:b3:92:a7:94:
         15:11:d6:46
-----BEGIN CERTIFICATE-----
MIIFqzCCBJOgAwIBAgIUAkCA/hLOUJQU6bXI6lvzJqav9XgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyODkxOTJiYTZhNjQ0N2FlOGUwZGZjMThjMzBkZThmYjY4
MThiYTY0N2Q0Mjc2NTY3MmMwHhcNMjUwNjE2MTI1NjI0WhcNMjYwNjE1MTMwMTI0
WjAzMTEwLwYDVQQDEygyNzlEQkY3RTZFREExNTBEODBCQTY0MzQ0MDgzNDRBREY1
MUU0QzJCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuy6d4oPtYdFv
eMiCPw46GY3Hoav+9LE340IdqWQhi/6jhOLtdhrKQUoO6LlPUYfIczmTaM8HIWDf
TLs6pRV5+zagVs3J83Hv40iUm09XgE4S2Py/4LzGKes9xm9ySVtNalhrwtPy/tY3
AuDEWYpeb+iUA6YACSeDFc+1oHq00mKVLWRX+x8zdeeLCeaUfPhISuqNBJ9wf4L3
3ncxPcHOYQX6sJWGLnj1LVxSAOsDD9xYKwX/f07v89ObsfSCzqzkkI0hH4+mjma7
+iIYLCqRmbf1RaalUa5/Uldm0Rpwnq/3Ug6eBvtP/iz1GjltUKuz+q7125HWWme5
jSZV+SLxPwIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFCedv35u2hUNgLpkNECDRK31
HkwrMB8GA1UdIwQYMBaAFKWN7L6satlsA/o0Y6JIPXL60aC7MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5L2U4YTc2NGRkZDkzZjQxMDE4OTk0MThlZjRkMmZkZTgxLzAv
QTU4REVDQkVBQzZBRDk2QzAzRkEzNDYzQTI0ODNENzJGQUQxQTBCQi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFh
NTQ4N2MzLzRkOTZkOWYwLTZmMTQtNDFmZS1iZjQ5LWVlZDkzMDIwMWEyMy84OTE5
MmJhNmE2NDQ3YWU4ZTBkZmMxOGMzMGRlOGZiNjgxOGJhNjQ3ZDQyNzY1NjcyYy5j
ZXIwgZsGCCsGAQUFBwELBIGOMIGLMIGIBggrBgEFBQcwC4Z8cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5L2U4YTc2NGRkZDkzZjQxMDE4OTk0MThl
ZjRkMmZkZTgxLzAvMzYzNDJlMzgzNDJlMzgzODJlMzAyZjMyMzEyZDMyMzEyMDNk
M2UyMDM1MzYzNTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQFRYMA0GCSqGSIb3DQEBCwUAA4IBAQCL
orc16M+NckMz21cWAPuOTGJA7GT9OptpO//sD7kPF3kaWG4zb84u0/XUMsnCUKwc
JlMTkxdj6G5cuXtTLpST22uLQfhr9NChsZ7cth/36JiGUGEZCZZA05BzmeWra8d/
Acxq60BaFb8GnV3xDMuwMasKkL+sCFulOVzkcbuMQ54VVVHFzWIh4MmBMvy8Gg6e
CyorLYS10BI481qPZBAwT/E9CowmX7pVduWMAWCJA9/gfs4P4zLwfzTx66DukhQf
sUJ58OroHFr/9JBZhx6Zw1pl4PBfclSbD53FLANVKL0WxkGxvbWUBm2xPdzIqA8t
EwNeU2/qMbOSp5QVEdZG
-----END CERTIFICATE-----
Generated at Wed Jun 18 01:54:03 2025 by rpki-client